Bob Beck wrote: > > I would think it would be nice if "CAL" had a way of > saying "these are the ones to be revoked" so no shutdown, just > propagate the bad one - but I'm talking to daniel offline about it.. That's easy. echo "ab:cd:ef..." > /etc/ssh/blacklist Or use a prediodic rsync to do that. Every pubkey fingerprint listed in it is denied access. -- Andre _______________________________________________ openssh-unix-dev mailing list openssh-unix-dev@mindrot.org http://lists.mindrot.org/mailman/listinfo/openssh-unix-dev |
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | Re: ssh-decrypt, Pawel Krupinski |
|---|---|
| Next by Date: | Re: OpenSSH Certkey (PKI), Andre Oppermann |
| Previous by Thread: | Re: OpenSSH Certkey (PKI), Nick Bender |
| Next by Thread: | Re: OpenSSH Certkey (PKI), Stephen Frost |
| Indexes: | [Date] [Thread] [Top] [All Lists] |